Forum Home
Press F1
 
Thread ID: 76570 2007-02-05 10:41:00 VPN and DSL-500 davehartley (3487) Press F1
Post ID Timestamp Content User
522895 2007-02-05 10:41:00 I've been going around in circles with this today. Our school has just joined SchoolZone, which requires us to use a VPN to access the school network now. The client was installed on my computer today, but it wouldn't talk to the Telecom VPN site. :angry I think it's due to my ADSL router, a DSL-500.

Now, I've done some research today, and found websites that state:

The DSL-500 has VPN Pass-Through
The DSL-500 does not have VPN Pass-Through


Which is right?!? Has anyone here got VPN going with a DSL-500 -- and if so, how? :(

Or is it time to bite the bullet and upgrade? :groan:
davehartley (3487)
522896 2007-02-05 11:14:00 Have look at this (www.dlink.co.nz) page and search for the DSL-500.

It says there that it does support VPN-passthrough.

Have a look at the trouble-shooting section about VPN not working.
CYaBro (73)
522897 2007-02-05 11:24:00 Yup, found that page. The problem with that one is this comment:


In order to allow VPN traffic to pass through your router with NAT enabled you need to put a tick next to "PPTP" or "IPSec" under IP Masquerade Passthrough.

Nowhere on the DSL-500 web admin pages does it have PPTP, IPSec or IP Masquerade.

And yes, I'm running the latest firmware :)
davehartley (3487)
522898 2007-02-05 23:08:00 If it is a Telecom supplied one then it may have had that function removed as they supply them with a crippled firmware. You say you have the latest firmware? is that the Dlink or Telecom firmware?

If all else fails one of the DSE ADSL routers will work. I use mine for both incoming and outgoing PPTP & IPSEC with no GRE issues.
ughnz (8297)
522899 2007-02-06 00:06:00 The firmware was downloaded from the DLink website (the same one as in CYaBro's post), version R2.02B2T8NZ. It's not a Telecom router, I got it from DSE a while ago (March 2004).

I'm just wondering if there's another firmware out there that does have the admin for IP Masquerade etc. Anyone know? :confused:
davehartley (3487)
522900 2007-02-06 03:04:00 Ok, are you sure it is not a firewall running on the client PC?

Also what error codes etc are shown when you try to make a connection?

Is the client PC at the school or at home?
ughnz (8297)
522901 2007-02-06 03:14:00 Yes, it's not the firewall on the clients, as I've tried it on both laptop (wireless) and desktop (wired) with firewalls turned off to check. Both computers are at home.

The error occurs when I try to create a new site in VPN-1 SecuRemote. It allows me to enter the vpn site, I give it the username and password, then it sits there for a while, finally giving an error:


Error: Communication with Gateway 210.54.54.11 at site vpn.schoolzone.net.nz failed

And that's it.

As far as I can tell, I'm the only one with the problem :o All the other staff haven't had any hassle ... which leads me to think it's my router, as it's by far the oldest one around.
davehartley (3487)
522902 2007-02-06 04:00:00 Assuming all the other staff members are using their personal PCs at home that means you have no domain membership, certificate or key issues.
If the other staff members are taking school laptops home and using them with their connection then it would point to your router.

It may be a licence issue? has the school only been allocated a fixed number of VPN connections?
ughnz (8297)
522903 2007-02-06 04:11:00 No, it can't be a problem with a fixed number of connections as I was the second staff member to get the VPN software installed :)

I'll test it out at a colleague's place, but it definitely looks like the router's not doing VPN Passthrough properly :(
davehartley (3487)
522904 2007-02-06 07:04:00 What if you do a quick test by putting your machine's IP address into the router in the DMZ?
Does it work then?
CYaBro (73)
1 2